854538c0195c7940653ca8dbf081e0ab92d9b387dec620008c3f466bf19eb8a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

854538c0195c7940653ca8dbf081e0ab92d9b387dec620008c3f466bf19eb8a0
Size

90KB
MD5

990b0c021ccf51c13615e874d6f91bb0
SHA1

b71c01db888e9a7c494ac032005aa24b27a5afb1
SHA256

854538c0195c7940653ca8dbf081e0ab92d9b387dec620008c3f466bf19eb8a0
SHA512

4cc9c66db798e03076234b19f9f4bb987106ff6b8dab6cabaeb58822521201f9b5210b6bee3f173d7f105ae4387876d52a5d27471077d8a34801916c807857d4
SSDEEP

1536:s1IM42BxTBCEZ5o8gfaDUMdWWDVqRaoItVp5MkJGMIq/cEA8G4gnfRNJRsjBFi9O:WxJIEZC8ijMdWKcctVp5MkJGM7/tsnfx

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

854538c0195c7940653ca8dbf081e0ab92d9b387dec620008c3f466bf19eb8a0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ